Re: [afnog] Red Hat 8.0 as a router

[shogunx <shogunx at sleekfreak.ath.cx>]

On Thu, 7 Aug 2003, Daniel Obuobi wrote:

> Hi,
>
> Thank you.
> Yes I am routing packets from multiple hosts through a
> single machine gateway (Red Hat 8.0)at the moment
> until a new Cisco router arrives.
>
> I have set up Linux Proxy at various points with class
> A IPs (10.0.0.x) and behind them I have a set of
> private ips.

i am assuming a 2.4 kernel...

if your public interface is eth0 then the following applies:
your kernel must be configured for network packet filtering, in networking
options.  netfilter configuration, also in networking options, must
include the following:
connection tracking=y
iptables support=m
full nat=m
masquerade target support=m

recompile and test your kernel.

then, somewhere in the boot sequence, after network card initialization,
include the following:

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

set the default gateway on your other machines with route add default
gateway $IPOFGATEWAY

ping from client machine.

who needs the cisco;)

Scott



>
> I have multiple network interface in the machine
> already. After installing the linux, what files must
> be edited and what are the exact changes required.
>
> Daniel
>
>
> --- shogunx <shogunx at sleekfreak.ath.cx> wrote:
> > On Thu, 7 Aug 2003, Daniel Obuobi wrote:
> >
> > > I would like to set up a Red Hat 8.0 linux box.
> > Can
> > > any one show me the best way to do that?
> >
> > Daniel,
> > Shall we have this discussion on this list for the
> > benefit of the others?
> >
> > Are you trying to route packets from multiple
> > machines through a single
> > gateway (the Red Hat machine)?
> >
> > Do all of the machines have Class A IP addresses, or
> > do some have local
> > addresses?
> >
> > I assume you have multiple network interfaces
> > installed in the machine
> > already?
> >
> > Scott
> >
> >
> > >
> > > Thanks
> > >
> > >
> > > =====
> > > Daniel Obuobi
> > > Co-ordinator, Computer Centre
> > > Technical Co-ordinator, AVU Cape Coast
> > > University of Cape Coast, Cape Coast, Ghana
> > > Tel: 233-42-32440 / 233-42-30859 (Office); Fax:
> > 233-42-34612
> > > Co-ordinator, Global Teenager Project, Central
> > Region, Ghana.
> > >
> > > __________________________________
> > > Do you Yahoo!?
> > > Yahoo! SiteBuilder - Free, easy-to-use web site
> > design software
> > > http://sitebuilder.yahoo.com
> > > __________________________________________________
> > > This is the Africa Network Operators' Group(AfNOG)
> > > technical discussion list.
> > > The AfNOG website is: <http://www.afnog.org>
> > >
> >
> > sleekfreak pirate broadcast
> > world tour 2002-3
> > live from the pirate hideout
> > http://sleekfreak.ath.cx:81
> >
>
>
> =====
> Daniel Obuobi
> Co-ordinator, Computer Centre
> Technical Co-ordinator, AVU Cape Coast
> University of Cape Coast, Cape Coast, Ghana
> Tel: 233-42-32440 / 233-42-30859 (Office); Fax: 233-42-34612
> Co-ordinator, Global Teenager Project, Central Region, Ghana.
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>

sleekfreak pirate broadcast
world tour 2002-3
live from the pirate hideout
http://sleekfreak.ath.cx:81

__________________________________________________
This is the Africa Network Operators' Group(AfNOG) 
technical discussion list.
The AfNOG website is: <http://www.afnog.org>